Recent vulnerabilities and exploits

8.1

GNU SASL libgsasl server-side read-out-of-bounds with malicious authenticated GSS-API client...

Gnul Gnu Sasl Debian Debian Linux 10.0 Debian Debian Linux 11.0

5.9

CVSSv3

Devices supporting Bluetooth before 5.1 may allow man-in-the-middle attacks, aka BLURtooth. Cross Transport Key Derivation in Bluetooth Core Specification v4.2 and v5.0 may permit an unauthenticated user to establish a bonding with one transport, either LE or BR/EDR, and replace...

Bluetooth Bluetooth Core Specification2 Github repositories available3 Articles available

NA

A vulnerability was found in laravel 5.1 and classified as problematic. This issue affects some unknown processing. The manipulation leads to deserialization. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier...

6

CVSSv3

There is an issue with grub2 before version 2.06 while handling symlink on ext filesystems. A filesystem containing a symbolic link with an inode size of UINT32_MAX causes an arithmetic overflow leading to a zero-sized memory allocation with subsequent heap-based buffer overflow....

Gnu Grub2 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Eus 8.1 Redhat Enterprise Linux Eus 8.2 Redhat Enterprise Linux Server Aus 8.2 Redhat Enterprise Linux Server Tus 8.2 Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.0413 Github repositories available

6.4

CVSSv3

If certificates that signed grub are installed into db, grub can be booted directly. It will then boot any kernel without signature validation. The booted kernel will think it was booted in secureboot mode and will implement lockdown, yet it could have been tampered. This flaw...

Gnu Grub212 Github repositories available

6.4

CVSSv3

GRUB2 fails to validate kernel signature when booted directly without shim, allowing secure boot to be bypassed. This only affects systems where the kernel signing certificate has been imported directly into the secure boot database and the GRUB image is booted directly without...

Gnu Grub2 Redhat Enterprise Linux Atomic Host -Redhat Openshift Container Platform 4.0 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.04 Debian Debian Linux 10.0 Opensuse Leap 15.1 Opensuse Leap 15.2 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Suse Suse Linux Enterprise Server 11 Suse Suse Linux Enterprise Server 12 Suse Suse Linux Enterprise Server 15 Microsoft Windows 10 -Microsoft Windows 10 1607 Microsoft Windows 10 1709 Microsoft Windows 10 1803 Microsoft Windows 10 1809 Microsoft Windows 10 1903 Microsoft Windows 10 1909 Microsoft Windows 10 2004 Microsoft Windows 8.1 -Microsoft Windows Rt 8.1 -Microsoft Windows Server 2012 -Microsoft Windows Server 2012 R2 Microsoft Windows Server 2016 -Microsoft Windows Server 2016 1903 Microsoft Windows Server 2016 1909 Microsoft Windows Server 2016 2004 Microsoft Windows Server 2019 -13 Github repositories available

6

CVSSv3

There is an issue on grub2 before version 2.06 at function read_section_as_string(). It expects a font name to be at max UINT32_MAX - 1 length in bytes but it doesn't verify it before proceed with buffer allocation to read the value from the font value. An attacker may...

Gnu Grub2 Redhat Enterprise Linux 7.0 Redhat Enterprise Linux 8.0 Redhat Enterprise Linux Eus 8.1 Redhat Enterprise Linux Eus 8.2 Redhat Enterprise Linux Server Aus 8.2 Redhat Enterprise Linux Server Tus 8.2 Opensuse Leap 15.1 Opensuse Leap 15.2 Canonical Ubuntu Linux 14.04 Canonical Ubuntu Linux 16.04 Canonical Ubuntu Linux 18.04 Canonical Ubuntu Linux 20.0413 Github repositories available

7.5

CVSSv3

A flaw was found in grub2 in versions prior to 2.06. The cutmem command does not honor secure boot locking allowing an privileged attacker to remove address ranges from memory creating an opportunity to circumvent SecureBoot protections after proper triage about grub's...

6.7

CVSSv3

There's an issue with grub2 in all versions before 2.06 when handling squashfs filesystems containing a symbolic link with name length of UINT32 bytes in size. The name size leads to an arithmetic overflow leading to a zero-size allocation further causing a heap-based...

Gnu Grub2 Opensuse Leap 15.1 Opensuse Leap 15.212 Github repositories available

8.2

CVSSv3

A flaw was found in grub2 in versions prior to 2.06. The rmmod implementation allows the unloading of a module used as a dependency without checking if any other dependent module is still loaded leading to a use-after-free scenario. This could allow arbitrary code to be executed...

Get Started

1 2 3 4 5 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook